CVE-2003-0766

CVE-2003-0766 describes multiple heap-based buffer overflows in FTP Desktop client version 3.5 and potentially earlier versions. These vulnerabilities allow remote malicious FTP servers to execute arbitrary code on a client system by sending overly long FTP banners or extended responses to USER or PASS commands. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code for these specific buffer overflows is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.